Legal updates and opinions
News / News
POPIA, Employment Contracts and Policies and Procedures
by Ahmore Burger-Smidt, Director and Head of the Data Privacy Practice; Jacques van Wyk, Director, Labour & Employment Practice; and Bradley Workman-Davies, Director, Labour & Employment Practice
With effect of 1 July 2020 a number of material provisions of the Protection of Personal Information Act 2013 (“POPIA”) will come into operation. As more fully detailed in a recent Werksmans’ Update, a number of these provisions impose substantive obligations on businesses (including employers) regarding the processing of personal information.
Positive obligations are placed on employers to, among others, ensure that they comply with the provisions of POPIA regarding the processing of their employees’, customers’ and service providers’ information. It is also important that their employees are equally aware of, and comply with, these obligations when processing any such information on behalf of the employer.
Employers will have 12 months, from 1 July 2020, to ensure that such measures are in place.
It is important that adequate provisions be inserted into contracts of employment and that workplace policies and procedures are implemented to ensure compliance with POPIA. These should include:
(a) The designation of an information officer;
(b) Procedures ensuring information is processed in a lawful manner;
(c) Ensuring that the processing of personal information is done in accordance with the eight conditions provided for in the legislation;
(d) Obtaining consent from employees for the processing of their personal information;
(e) Providing training and information to human resources practitioners as well as employees in order to ensure that information is processed lawfully and that employees, as ‘data subject’s , are aware of their rights;
(f) Putting in place measures to ensure the processing of ‘special personal information’ is lawful;Dealing with any cross-border processing of information; and
(g) Implementing procedures to address and deal with any complaints from, among others, employees regarding the processing of their personal information;
We are able to assist with preparation and/or reviewing of abovementioned and to advise on all aspects of POPIA.
Latest News
Regulations Regarding the Control of the Import or Export of Waste
and Slade van Rooyen, Candidate Attorney, reviewed by Natalie Scott, Director and Head of Sustainability On 2 October 2023, the [...]
Bulk interception and surveillance and the might of the State
"It’s important to recognize that you can’t have 100 percent security and also then have 100 percent privacy and zero [...]
The nexus: Disinformation, Misinformation, and Privacy in the Age of Gen AI
The risks associated with disinformation and misinformation have reached heights never seen before in the era of Generation AI (Gen [...]
Managing Tax Risks Through Tax Indemnity Insurance
Taxpayers have multiple tax risk management options at their disposal when entering into complex transactions with each option having its [...]
Prudential Authority Issues Guidance on Climate-Related Governance/Risk Practices and Disclosures for Insurers
By Slade van Rooyen, Candidate Attorney, reviewed by Natalie Scott, Director and Head of Sustainability On 10 May 2024, the [...]
Prudential Authority Issues Guidance on Climate-Related Governance/Risk Practices and Disclosures for Banks
By Slade van Rooyen, Candidate Attorney, reviewed by Natalie Scott, Director and Head of Sustainability On 10 May 2024, the [...]